refactor: compatible with session timeout configuration

halo-dev · Apr 22, 2024 · 434a581 · 434a581
1 parent d380c6b
commit 434a581
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/application/src/main/java/run/halo/app/config/WebServerSecurityConfig.java b/application/src/main/java/run/halo/app/config/WebServerSecurityConfig.java
@@ -8,6 +8,8 @@
 import java.util.concurrent.ConcurrentHashMap;
 import lombok.RequiredArgsConstructor;
 import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.boot.autoconfigure.session.SessionProperties;
+import org.springframework.boot.autoconfigure.web.ServerProperties;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.core.Ordered;
@@ -138,8 +140,14 @@ ServerSecurityContextRepository securityContextRepository() {
     }
 
     @Bean
-    public ReactiveIndexedSessionRepository<MapSession> reactiveSessionRepository() {
-        return new InMemoryReactiveIndexedSessionRepository(new ConcurrentHashMap<>());
+    public ReactiveIndexedSessionRepository<MapSession> reactiveSessionRepository(
+        SessionProperties sessionProperties,
+        ServerProperties serverProperties) {
+        var repository = new InMemoryReactiveIndexedSessionRepository(new ConcurrentHashMap<>());
+        var timeout = sessionProperties.determineTimeout(
+            () -> serverProperties.getServlet().getSession().getTimeout());
+        repository.setDefaultMaxInactiveInterval(timeout);
+        return repository;
     }
 
     @Bean